Slashdot Mirror

← Back to Stories (view on slashdot.org)

Hacker Finds Multiple PDF Backdoors

Posted by ryuzaki0 on from the watch-where-you-put-that dept.

Gungadin writes "Eweek.com has a story about a British security researcher figuring out a way to manipulate legitimate features in Adobe PDF files to open backdoors for computer attacks. David Kierznowski, a penetration testing expert specializing in Web application testing, has released proof-of-concept code and two sample PDF files to demonstrate how the Adobe Reader program can be rigged to launch Web-based attacks without any user action. He claims there are least seven different ways to backdoor a PDF."

5 of 147 comments (clear)

  1. PDF? by Anonymous Coward · · Score: -1, Offtopic

    I thought PDF was for penis-deprived fag.

  2. Re:Heh by Anonymous Coward · · Score: -1, Offtopic

    Or to call it PDF! hahaha

    (Penetrate Da Females)

  3. XXX.pdf by f4hy · · Score: -1, Offtopic

    How long until someone posts a link to a pdf file of... "backdoors"

  4. Re:Windoze and IE implicated, again. by Anonymous Coward · · Score: -1, Offtopic
    twitter, please read this carefully. Following this advice will make Slashdot a better place for everyone, including yourself.

    • As a representative of the Linux community, participate in mailing list and newsgroup discussions in a professional manner. Refrain from name-calling and use of vulgar language. Consider yourself a member of a virtual corporation with Mr. Torvalds as your Chief Executive Officer. Your words will either enhance or degrade the image the reader has of the Linux community.
    • Avoid hyperbole and unsubstantiated claims at all costs. It's unprofessional and will result in unproductive discussions.
    • A thoughtful, well-reasoned response to a posting will not only provide insight for your readers, but will also increase their respect for your knowledge and abilities.
    • Always remember that if you insult or are disrespectful to someone, their negative experience may be shared with many others. If you do offend someone, please try to make amends.
    • Focus on what Linux has to offer. There is no need to bash the competition. Linux is a good, solid product that stands on its own.
    • Respect the use of other operating systems. While Linux is a wonderful platform, it does not meet everyone's needs.
    • Refer to another product by its proper name. There's nothing to be gained by attempting to ridicule a company or its products by using "creative spelling". If we expect respect for Linux, we must respect other products.
    • Give credit where credit is due. Linux is just the kernel. Without the efforts of people involved with the GNU project , MIT, Berkeley and others too numerous to mention, the Linux kernel would not be very useful to most people.
    • Don't insist that Linux is the only answer for a particular application. Just as the Linux community cherishes the freedom that Linux provides them, Linux only solutions would deprive others of their freedom.
    • There will be cases where Linux is not the answer. Be the first to recognize this and offer another solution.

    From http://www.ibiblio.org/pub/linux/docs/HOWTO/Advoca cy

  5. Re:Windoze and IE implicated, again. by Anonymous Coward · · Score: -1, Offtopic

    http://slashdot.org/comments.pl?sid=88413&cid=7656 803
    http://slashdot.org/comments.pl?sid=77588&cid=6896 690
    http://slashdot.org/comments.pl?sid=73226&cid=6595 921
    http://slashdot.org/comments.pl?sid=71864&cid=6492 229
    http://slashdot.org/comments.pl?sid=69025&cid=6312 196
    http://slashdot.org/comments.pl?sid=49657&cid=5011 656
    http://slashdot.org/comments.pl?sid=180946&thresho ld=1&cid=14972959
    http://slashdot.org/comments.pl?sid=129735&thresho ld=5&cid=10823036
    http://slashdot.org/comments.pl?sid=112229&cid=952 1025&threshold=5
    http://slashdot.org/comments.pl?sid=137420&cid=114 89094&threshold=5
    http://slashdot.org/comments.pl?sid=155076&cid=130 11391&threshold=5
    http://slashdot.org/comments.pl?sid=113493&thresho ld=5&cid=9614809
    http://slashdot.org/comments.pl?sid=164775&cid=137 51004
    http://slashdot.org/comments.pl?sid=126301&thresho ld=5&cid=10572437
    http://slashdot.org/comments.pl?sid=119108&thresho ld=5&cid=10056927
    http://slashdot.org/comments.pl?sid=135403&cid=112 99129&threshold=5
    http://slashdot.org/comments.pl?sid=136181&thresho ld=5&cid=11374447
    http://slashdot.org/comments.pl?sid=134005&thresho ld=5&cid=11203454
    http://slashdot.org/comments.pl?sid=159878&thresho ld=0&cid=13384602
    http://slashdot.org/comments.pl?sid=166661&cid=138 99128&threshold=2
    http://slashdot.org/comments.pl?sid=168164&cid=140 19967
    http://slashdot.org/comments.pl?sid=168163&cid=140 20030&threshold=5
    http://slashdot.org/comments.pl?sid=172399&thresho ld=1&cid=14355804